Privacy Policy
Last updated 16 October 2026
Northern Rivers Imaging ("we", "us") respects your privacy. This policy explains how we handle personal and health information in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and the Health Records and Information Privacy Act 2002 (NSW). It applies to our clinics at Mullumbimby, Yamba and Evans Head and to this website.
1. Information we collect
To provide imaging services safely we may collect:
- Your name, date of birth, address, phone and email.
- Medicare, DVA, health fund, pension or concession card details.
- Referral details, clinical history, medications, allergies, pregnancy status and implant information relevant to your scan.
- Images, reports and records created during your examination.
- Details of your referring doctor and other treating practitioners.
- Website data such as booking-form entries, uploaded referral files and basic technical information (browser type, pages visited).
2. How we collect it
Directly from you (in person, by phone, through our booking form or uploaded referrals), from your referring practitioner, and where necessary from other healthcare providers, a guardian or a person responsible for you. If you do not provide the information we need, we may be unable to perform your examination or claim a Medicare rebate.
3. How we use it
- To book, prepare for and perform your examination safely.
- To report your images and send results to your referrer and nominated practitioners.
- To process billing and claims with Medicare, DVA and health funds.
- To contact you about appointments, preparation and follow-up.
- For quality assurance, accreditation, clinical audit and to meet legal obligations.
4. Disclosure
We only disclose your information as permitted by law, including to:
- Your referring practitioner and other doctors involved in your care.
- Medicare, DVA, health funds and insurers for billing.
- Trusted service providers (IT, image archiving, email and hosting) bound by confidentiality.
- Government bodies or courts where required or authorised by law.
We do not sell your information or use it for unrelated marketing.
5. Overseas disclosure
Some of our technology providers may store data on servers located outside Australia. Where this occurs we take reasonable steps to ensure the information is protected to a standard consistent with the APPs.
6. Storage and security
Records are held electronically in secure systems with access controls, encryption and audit logging. Website booking requests, contact details and referral documents are retained in a private staff workspace accessible only to approved staff accounts. Booking notifications are also sent to our bookings team by email. Staff status and note changes and referral access are recorded. Uploaded referrals are stored privately and shared with our team only through expiring secure links. Health records are retained for at least seven years after your last visit (or until age 25 for children), as required by NSW law, then securely destroyed.
7. Accessing and correcting your information
You may request access to, or correction of, the information we hold about you by contacting us at admin@nrimaging.com.au. We will respond within a reasonable time, usually 30 days. A fee may apply for copies of images. We may decline access in limited circumstances permitted by law and will explain why.
8. Website, cookies and online forms
Our website uses only essential cookies and basic analytics. Information submitted through booking or referral forms is transmitted securely and used only to arrange your care. Please do not send sensitive clinical details by ordinary email.
9. Data breaches
We comply with the Notifiable Data Breaches scheme and will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) where a breach is likely to result in serious harm.
10. Complaints and contact
Questions or complaints about privacy can be sent to our Privacy Officer at admin@nrimaging.com.au or by phone on (02) 6684 2354. If you are not satisfied with our response you may contact the OAIC (oaic.gov.au, 1300 363 992) or the NSW Information and Privacy Commission (ipc.nsw.gov.au).